The image shows the architecture for your OCI Region and tenancies to manage your desktop pool.

The client/remote users connect to the OCI Region using Native Binary or a Web Browser through the internet.

The OCI Region hosts two tenancies: Service Tenancy and a Customer Tenancy.

The Service Tenancy hosts the Desktop Pools and the Control Layer and connect to the internet vide Secure Private Access.

The Customer Tenancy includes a VCN with a private subnet which hosts multipel desktops which are part of a desktop pool. The VCN also includes a storage layer.